A858DE45F56D9BC9 archive

201309020059 1ljbkb

explained decrypted filler

seed 869

Metadata

Post ID
1ljbkb
Title
201309020059 → 2013-09-02 00:59 on A858's clock
Posted (UTC)
2013-09-01 20:59:58
Timezone
UTC+4 · title 00:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309020059) = b78959dff9b84d61e0b31af60840b312 (name+title)
GUIDs
32
Filler GUID seed
new Random(869).Next(9) ✓ verified
Run
Run 52 (seed 1,430,705,843) (seed)
Draw
16 · predicted N = 32 ✓
Machine boot
2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309020059 (name+title). Key = MD5(password) = b78959dff9b84d61e0b31af60840b312, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 212ef683-7854-6193-b71f-6dc51bd64963
  2 9d4bfc5b-2210-760b-a0b8-a7bc97b9e9b5
  3 0737b5f7-6134-105a-a0bf-e8065f839869
  4 a1ad2922-37a4-0f0b-8a22-b0fe67c146e2
  5 dec2a00c-11e8-4827-9ca8-21aa17b9545b
  6 fbc58308-0a36-8720-8d0b-6fc2e7a83ecd
  7 b8c7ba05-0432-2750-b6bd-3a8c5e9aaf39
  8 2c234b07-9314-3fdc-a657-5bf3b732ecda
  9 132b3ec4-8645-41cd-91ef-541b61c728a6
 10 b076c689-baf5-6d58-8311-ae05c222ed8d
 11 16f6934e-c453-4263-a4ac-c48326c3e67a
 12 37ef41a6-5a36-8a25-bfdb-2302547c903b
 13 28a55fcf-c9de-005f-aa5a-dcde05f50d6f
 14 8704993b-5b5a-537f-a9b2-c43422c8fdf0
 15 a27f86e7-d944-2640-8e98-0458e13e4699
 16 2ce62e7e-0ac7-6195-8bd9-a36628f665c5
 17 8779907f-b62c-1889-a62c-706194109583
 18 646de297-8403-602e-844d-fb7a4ba6bc09
 19 a5cc8711-d34b-162e-b135-6cff201ba5b8
 20 e03ab228-d3ba-7881-978a-68ad4037e2d0
 21 60f09499-8336-2de4-ad78-1b1417efeb77
 22 3f7725e6-4099-03d3-88c8-672035539ef3
 23 919839bc-3d89-72c2-a519-f753a291a905
 24 ee05b1da-0c35-550e-a9aa-7ad2fccc212f
 25 26e43a05-9186-762c-92ee-1a529808d154
 26 a8d6628c-e835-4c88-ac27-1f4297dc27b3
 27 cbfc05d3-134e-0b11-b383-48723ab0a2e7
 28 8942be26-8fd2-1286-ac9d-bc0e031bb79d
 29 e9027ad2-8676-586a-93d5-6a3050893d6d
 30 577a907a-94f5-825d-a701-b5b909dfc5b9
 31 1804ca1f-a843-02a7-83f9-2cbba9341777
 32 c1f193ae-7b5f-31f9-8e80-34c59d89fefe

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67104823464805261617207574015803. Exactly this sequence comes out of new Random(869).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs